Menu

Porting a SAML-project from 9 IAS to 10g

At my customers’ site all projects need to be ported from an IAS 9 enviroment to 10g, normally you would think just redeploy the ear-files and everything will run just fine but this isn’t the case.

For example, an application using SAML Tokens wasn’t working any more when trying to deploy it to the 10g environment. When we tried to run the application in the embedded container in JDeveloper 10.1.3.2 the application didn’t work either.

No changes were made to the application and it runs fine on 9 IAS but it doesn’t anymore on 10G or embedded OC4J in JDeveloper 10.1.3.2.

This needs some investigation wright …

The exception that was thrown by the application when trying to run it embedded was the following:

Trying to replace the different jar-files such as xercesImpl and xalan didn’t do the trick and then finally I stumbled on a post concerning troubles with IBM-libraries and XMLSec.jar.

In the post the following was stated:

xmlsec 1.1 and the IBM JRE don’t get along. Endorsement isn’t the issue, thealgorithms have to registered in the xmlsec config file inside the jar andby default it doesn’t know about their JCE.

You might try dropping in the 1.2 xmlsec code, I believe they dumped the oldscheme and just use the JCE calls to get algorithms now. Another option isto use the BouncyCastle JCE, if it even runs with IBM’s JRE.

So I thought it might be a problem with the JDK version we were using, the older version used JDK 1.4.2 and now, with JDeveloper 10.1.3.2 we were using JDK 1.5.

So let’s try the same proposition as for IBM, download the latest version of the xml security library.